Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
File:                     7bkm-MYDqrectGqIO_YyVko_qr8.mft (raw, json)
Hash identifier:          vscdkelu2OZKyEKFZ4WvSpJHlQmrUhMEALJF05r/65Y=
Subject key identifier:   11:AA:A0:A3:47:7B:33:A2:1E:8B:39:2B:8E:04:FF:C2:6B:FD:06:89
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Certificate issuer:       /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial:       01A131B4BE2F85ED9D87410493AA3F163BCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
Manifest number:          1ACE
Signing time:             Mon 12 Oct 2026 20:01:31 +0000
Manifest this update:     Mon 12 Oct 2026 20:01:31 +0000
Manifest next update:     Tue 13 Oct 2026 20:01:31 +0000
Files and hashes:         1: 5CiJxwVbdUZ8eM7me5oInvUUaLg.asa (hash: dP8XoNIksXb4H+NwZjef9TLwaeJ0Qhddyzp+zEO5+gw=)
                          2: 7bkm-MYDqrectGqIO_YyVko_qr8.crl (hash: Qz9Wn+sW5Oapm8c4wBLcdpEDmKmqfjLSkPiDc1aMrJ0=)
                          3: ZOavrk-QF97rJP_2jNT7lmVgOvE.roa (hash: r2s3h1w3Hjfzrez9cKoP8cqtXCYOTfAkva8ue3B7Z2Q=)
                          4: b4zo6KiTgoc5L-wE1iEGLa3ot54.roa (hash: 7qq5CHWNx2oa5BEGotuEcxfckS6TczcC6U6UJrqCLzo=)
                          5: ffZakNnkJ9qo1A3shFhtl9qXd_Q.roa (hash: zf21A+pRvsATbzNE1edRMBnzKSA0PFpPQRbeA3NRvG4=)
                          6: g2nNQ5VhHao4Apal56-pguzsiBg.asa (hash: gNuWJZ3S7x7XLK2/IgqTwexYiw/r4lDYIjTdNxVRqcE=)
                          7: ySpczFe0bFDpQcjPCdkMrRLgsk4.roa (hash: 4bkzvAWfxVndAxO5MdGK6YbLnfuFOHsrNBENCi5CdAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 20:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:31:b4:be:2f:85:ed:9d:87:41:04:93:aa:3f:16:3b:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
        Validity
            Not Before: Oct 12 20:01:31 2026 GMT
            Not After : Oct 13 20:01:31 2026 GMT
        Subject: CN=11aaa0a3477b33a21e8b392b8e04ffc26bfd0689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:48:13:c5:ab:b1:f3:2c:20:f7:03:60:05:95:
                    89:92:fe:3e:48:5b:f7:78:d7:b8:19:a4:ec:96:e9:
                    aa:3b:6d:a5:9a:fb:7c:d8:73:a6:a7:6c:79:38:ed:
                    4f:f8:f7:b2:1e:8d:5c:7e:68:f5:c8:ca:13:1d:1b:
                    4f:cd:28:c4:4a:78:dc:26:95:15:05:b1:1b:d8:06:
                    15:27:6a:13:b0:89:aa:26:45:36:c4:91:ea:34:02:
                    9d:b4:e1:46:44:57:3d:f2:05:fb:e3:c0:ad:41:3a:
                    fb:86:e0:9e:1c:a7:a4:d1:fe:99:1d:91:29:21:61:
                    4d:74:9d:3f:65:53:04:43:dd:c6:4b:38:1c:41:70:
                    fc:53:eb:8e:a9:b9:c4:76:48:bb:f2:4c:f9:23:71:
                    38:6d:51:ea:b9:66:f1:ac:ab:ef:66:cc:5c:a0:2d:
                    1a:f8:05:92:62:9d:fe:83:72:0e:46:50:19:47:5b:
                    20:d8:9f:ff:cc:12:8f:ff:9b:47:cb:8e:84:19:35:
                    4a:0e:20:66:74:53:e5:85:ba:7a:a1:51:a8:8b:bc:
                    ce:6d:a7:51:de:46:1a:01:f5:de:c5:d2:6e:43:cb:
                    08:cd:57:6d:c8:aa:2e:79:a7:2a:11:d4:f3:ba:a3:
                    a3:20:f7:ec:4d:ae:0a:b1:9a:f5:f6:dc:19:25:ea:
                    8f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AA:A0:A3:47:7B:33:A2:1E:8B:39:2B:8E:04:FF:C2:6B:FD:06:89
            X509v3 Authority Key Identifier:
                keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:6b:25:44:ec:82:28:e0:2a:06:fa:25:d5:71:56:43:d8:2f:
         65:44:35:7e:8e:25:53:35:37:5c:b2:1a:71:d7:c7:8a:43:43:
         c3:b5:91:88:3b:94:49:21:8e:36:09:82:88:a1:64:15:df:29:
         4e:c4:87:35:9a:13:91:e9:c7:23:8e:43:e3:21:73:51:29:2b:
         81:22:fd:4e:85:69:5b:4f:62:40:03:eb:10:59:97:5d:59:0a:
         af:a4:23:52:08:9e:64:e1:7c:b8:1f:f6:ff:3b:08:f3:9d:45:
         d0:b5:c0:83:f1:8f:8d:6d:3e:86:8c:5f:40:3a:75:75:3e:45:
         45:a7:8f:4f:0f:ee:84:a8:17:72:3f:e3:38:38:c1:3c:bf:67:
         f8:d3:6f:d8:6b:a2:06:29:4d:25:7c:75:e5:f2:64:74:ab:a9:
         3d:14:58:00:d4:a6:64:10:bd:ad:9c:e4:5a:d3:5d:c7:3a:c7:
         8d:53:ce:0c:0a:49:71:e5:9c:01:5f:03:da:3b:70:7c:6e:87:
         72:18:6d:4b:3a:2f:76:61:80:1c:11:78:00:4f:34:db:4e:b3:
         1f:2a:dd:ee:d0:28:fe:37:55:37:63:10:17:ac:01:58:50:64:
         93:70:ec:d7:79:42:82:b4:d1:40:f0:30:8f:31:e2:45:da:3f:
         13:8a:37:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 02:20:39 2026 by rpki-client